Privacy Policy

Effective Date: March 10, 2026  |  Last Updated: June 27, 2026

Veda Culinary Science LLC ("we," "us," or "our") operates the BakingBuddhi mobile application and web service (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

1. Information We Collect

1.1 Account Information

When you create an account or sign in with Google, Apple, Facebook, or email magic link, we collect:

• Email address — used for authentication and account recovery.
• Full name — displayed within the app.
• Profile photo URL — sourced from your Google or Facebook account and displayed in the app interface. Apple Sign In does not provide a profile photo.

When you sign in with Apple, we receive your name and email address as authorized through the Apple Sign In dialog. Apple may provide a private relay email address if you choose to hide your email. We do not receive any other data from your Apple account. Apple's handling of this data is governed by Apple's Privacy Policy.

When you sign in with Facebook, we receive your public profile information (name, profile picture) and email address as authorized through the Facebook Login dialog. We do not access your Facebook friends list, posts, photos, or any other Facebook data beyond what is listed above. We do not sell, license, or purchase data obtained from Facebook/Meta.

1.2 User-Generated Content

We store the following content that you create or configure within the app:

• Chat messages and conversation history with the AI baking assistant.
• Kitchen settings (skill level, equipment inventory, dietary restrictions and preferences, brand preferences, ingredient substitutions, modernist pantry items).
• Recipe cards, exports, and shared files.

1.3 Location Data

With your explicit permission, we collect approximate location data (city/region level) to provide environmentally-aware baking guidance. This includes altitude and local humidity conditions that affect baking outcomes (e.g., leavening adjustments at high altitude). Location data is not stored permanently and is used only during active sessions.

1.4 Audio Data

When you use the Live Chat voice feature, your microphone audio is streamed in real-time to Google's Gemini AI API for speech processing. Audio data is transient — it is processed in real-time and not stored by BakingBuddhi. Google's handling of this data is governed by Google's Privacy Policy.

1.5 AI Processing — Data Sent to Google Gemini

BakingBuddhi's recipe generation, baking guidance, photo understanding, and voice features are powered by Google Gemini, an artificial-intelligence service operated by Google LLC ("Google"). To generate a response, the app sends the following data to Google Gemini:

• Your chat messages and the conversation context of your current session.
• Photos and images you upload (e.g., a photo of an ingredient, a bake, or a written recipe).
• Your kitchen profile and preferences — skill level, dietary restrictions and preferences, equipment inventory, ingredient substitutions, brand preferences, modernist-pantry items, and any custom instructions you provide.
• Your language/locale setting, so responses are returned in your language.
• Your environment — approximate location (city/region level), altitude, and local humidity — used to tailor baking guidance (e.g., high-altitude leavening adjustments).
• Voice audio, when you use the Live Chat voice feature (streamed in real time; see Section 1.4).

This data is sent only to generate your AI response. We present an in-app disclosure and obtain your explicit consent before any data is sent to Google for AI processing, and AI features remain disabled until you agree. Google acts as our service provider for this processing and is required to provide the same or an equivalent level of protection for your data as described in this Privacy Policy. Google's handling of this data is also governed by the Google Privacy Policy. We do not sell your data, and you may withdraw your consent at any time in Settings → About → AI & Data.

1.6 Payment Information

When you subscribe to BakingBuddhi, payment processing is handled entirely by Stripe, Inc. We do not directly collect, store, or have access to your full payment card numbers. Stripe may share limited billing information with us (e.g., last four digits, expiration date, billing address) for account management. Stripe's handling of your data is governed by the Stripe Privacy Policy.

1.7 Information We Do NOT Collect

• We do not use advertising or tracking SDKs.
• We do not collect device identifiers for advertising purposes.
• We do not sell your data to third parties.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Personalize your baking experience with dietary adaptations, equipment-appropriate instructions, and skill-level adjustments.
• Provide environmentally-aware baking guidance based on your location.
• Enable real-time voice interaction with the AI baking assistant.
• Respond to your inquiries and provide customer support.

3. Third-Party Services

We share data with the following third-party service providers, solely for the purpose of operating the Service:

Service	Provider	Data Shared	Purpose
AI Processing	Google (Gemini API)	Chat messages, uploaded photos, kitchen profile & preferences, language/locale, approximate location & environment, voice audio (transient)	AI-powered recipe generation and baking guidance
Authentication	Google (OAuth 2.0)	Email, name, profile photo	Secure sign-in
Authentication	Meta/Facebook (OAuth 2.0)	Email, name, profile photo	Secure sign-in
Authentication	Apple (Sign in with Apple)	Email (or private relay email), name	Secure sign-in
Database	Supabase	Account and profile data	Data storage and retrieval
Payment Processing	Stripe	Billing information (via Stripe-hosted forms)	Subscription billing
Error Monitoring	Sentry	Error reports, performance data (no PII)	Application stability and performance
Hosting	Google Cloud	Server traffic (encrypted)	Backend infrastructure

We do not sell, rent, or trade your personal information to any third party. Each of these providers acts as our service provider and is contractually required to provide the same or an equivalent level of protection for your data as set out in this Privacy Policy, and to use the data only to deliver the service on our behalf. For AI processing specifically (Google Gemini), we obtain your explicit in-app consent before any data is shared — see Section 1.5.

4. Data Security

• All data transmission between the app and our servers uses TLS/HTTPS encryption.
• Authentication is handled via Google OAuth 2.0, Apple Sign In, and Meta/Facebook OAuth 2.0 — we do not store passwords.
• Database access is protected by row-level security (RLS) policies that enforce strict user data isolation — users cannot access other users' data.
• Sensitive billing data (Stripe customer IDs, subscription details) is protected by additional RLS policies.

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure.

5. Data Retention and Deletion

• Your account data and chat history are retained for as long as your account is active.
• You may request deletion of your account and all associated data at any time through the in-app account deletion feature (Profile → Danger Zone → Delete Account) or by contacting us at the email address below.
• Upon account deletion, all personal data — including any data received from Facebook/Meta — is permanently removed from our systems within 30 days.
• If you signed in with Facebook, you may also manage your data connection through your Facebook App Settings.

6. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability (receive your data in a structured format).

To exercise any of these rights, please contact us using the information below.

8. AI-Generated Content Disclaimer

BakingBuddhi uses artificial intelligence (Google Gemini) to generate recipe suggestions, baking guidance, and cooking advice. While we strive for accuracy:

• AI-generated content should not be considered a substitute for professional dietary, medical, or food safety advice.
• Users with severe allergies or medical dietary requirements should independently verify all AI-generated recipe modifications.
• You can report inaccurate or inappropriate AI-generated content directly within the app using the report feature.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at:

Veda Culinary Science LLC
Email: privacy@bakingbuddhi.ai
Website: bakingbuddhi.ai